what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

OSVDB: OSVDB-93004

Exim and Dovecot Insecure Configuration Command Injection

Posted Jun 10, 2013

Authored by juan vazquez, temp66, eKKiM | Site metasploit.com

This Metasploit module exploits a command injection vulnerability against Dovecot with Exim using the "use_shell" option. It uses the sender's address to inject arbitrary commands since this is one of the user-controlled variables, which has been successfully tested on Debian Squeeze using the default Exim4 with dovecot-common packages.

tags | exploit, arbitrary

systems | linux, debian

advisories | OSVDB-93004

SHA-256 | d72b6de0ba7eaf73295bab2780dde4862dd95a6711d35c8ea50c93c6aad58c90

Download | Favorite | View

Exim sender_address Remote Command Execution

Posted Jun 5, 2013

Authored by eKKiM

Exim sender_address parameter remote command execution exploit that spawns a connect-back shell.

tags | exploit, remote, shell

SHA-256 | 9b7e5b2ab5d077019a9d4cd152be0e3cd435bd5a759bcb011ea9bf0a0ca131fb

Download | Favorite | View